CVE-2025-12773: Broadcom Sannav

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

A vulnerability in update-reports-purge-settings.sh script logging for Brocade SANnav before 2.4.0a could allow the collection of SANnav database password in the system audit logs. The vulnerability could allow a remote authenticated attacker with access to the audit logs to access the Brocade SANnav database password.

Affected products

• Broadcom Sannav: before 2.4.0a (fixed in 2.4.0a)

Published 2026-02-03. Last modified 2026-06-17.